$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f0c78555-959f-3406-a67f-c1b8b75f63c0.roa File: f0c78555-959f-3406-a67f-c1b8b75f63c0.roa (raw, json) Hash identifier: ppaLvHwjIlRxpLkXgwunrOZNzlpe9Q5vHxPxmyIvjIo= Subject key identifier: F7:5D:86:A4:BA:F5:EE:7D:08:7C:F9:42:B8:07:97:A4:EC:93:52:78 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584E8DEFAE7A408AA8651501CC00 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f0c78555-959f-3406-a67f-c1b8b75f63c0.roa Signing time: Sun 19 Jul 2026 21:00:12 +0000 ROA not before: Sun 19 Jul 2026 21:00:12 +0000 ROA not after: Sat 17 Oct 2026 21:00:12 +0000 asID: 8069 IP address blocks: 20.157.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:8d:ef:ae:7a:40:8a:a8:65:15:01:cc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Jul 19 21:00:12 2026 GMT Not After : Oct 17 21:00:12 2026 GMT Subject: CN=9c88ca69-5d96-40db-8b46-645ddbc2a350 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:e1:75:b8:fd:50:bc:d0:c9:53:c0:1f:98:d7: ec:07:c7:9c:4e:52:c8:07:84:75:e9:f5:81:88:07: 3e:01:40:fa:84:f6:bf:3b:5e:6a:f2:ff:48:81:3a: f2:b6:21:eb:22:28:9b:e1:da:1e:c4:55:6f:c4:32: 2c:fe:9f:6f:c7:1b:13:f3:bb:22:e6:69:44:37:e3: 3c:82:aa:02:d2:ea:20:1b:39:a3:dc:fa:a0:6f:50: d8:32:90:2c:bd:9a:0c:ee:71:44:a5:40:c9:4b:cf: 3f:e1:8d:53:d6:8f:26:d3:af:ca:f8:00:64:f8:43: 59:8e:b9:0d:6e:a3:94:f0:a4:b5:52:70:26:3d:e3: f1:d8:57:9b:b5:42:90:5d:5b:b7:33:08:9a:db:9d: 1c:cc:c6:c0:f2:5e:eb:a7:23:88:2a:c8:13:10:e6: 59:60:56:88:7d:11:a9:0c:6c:be:c1:76:5f:81:f4: 30:6d:d5:a4:1a:ae:a9:d1:cd:c2:fa:51:a7:9f:16: 2a:38:83:e5:95:bb:d1:97:46:9d:c7:72:d3:70:a1: 80:78:fe:0d:58:9f:a5:b1:45:8a:34:0e:7e:0c:3d: d0:af:d8:cf:ac:98:97:6e:60:a8:ef:94:f6:66:d5: be:03:d4:5a:d9:3e:3b:c3:7c:07:85:72:e2:c2:7a: e1:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:5D:86:A4:BA:F5:EE:7D:08:7C:F9:42:B8:07:97:A4:EC:93:52:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f0c78555-959f-3406-a67f-c1b8b75f63c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.157.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:ce:30:f0:75:2a:b9:fa:62:55:09:6b:61:f7:81:74:d7:02: 27:2a:09:06:67:75:32:2b:39:83:8e:46:09:1e:83:14:3c:3b: 9f:ff:6d:8f:3b:11:05:77:5b:69:5d:75:05:d2:57:c4:2c:d6: 13:ff:b1:c4:c7:de:f9:f7:ed:29:0f:bd:67:47:9f:05:da:5e: 7c:33:c8:9b:58:3d:4a:3c:f7:d8:bb:66:9e:b4:71:5b:f6:0e: 6f:51:b7:d1:14:fa:87:08:39:7e:92:bc:a3:40:f9:78:4a:67: 8c:8d:ea:d8:e3:64:b4:09:bc:b2:d2:48:fe:2d:ca:35:3d:ae: a2:2d:a5:1f:40:6e:9c:e6:aa:21:61:e8:eb:95:6c:a1:85:3c: 76:7b:27:03:86:86:63:8f:65:46:0c:ee:fc:1f:50:ac:cd:fe: 37:19:44:23:0e:bf:a6:b6:bd:f4:26:61:5a:54:27:d3:e6:81: 15:f0:c4:db:11:ca:f7:20:b0:57:4e:90:dc:96:d6:8c:e4:6d: 70:0c:4a:96:eb:ab:56:8e:1b:d3:c1:60:9e:5b:a7:1d:50:19: 79:95:da:ee:e4:f9:2c:d3:cd:61:aa:13:b8:cd:64:04:02:1b: 62:ff:ff:74:59:74:4a:69:0e:2f:6a:29:65:b2:97:a2:9d:75: 64:75:55:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6N7656QIqoZRUBzAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDcxOTIxMDAxMloXDTI2MTAxNzIxMDAxMlowLzEtMCsGA1UEAxMk OWM4OGNhNjktNWQ5Ni00MGRiLThiNDYtNjQ1ZGRiYzJhMzUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+F1uP1QvNDJU8AfmNfsB8ecTlLIB4R16fWB iAc+AUD6hPa/O15q8v9IgTrytiHrIiib4doexFVvxDIs/p9vxxsT87si5mlEN+M8 gqoC0uogGzmj3Pqgb1DYMpAsvZoM7nFEpUDJS88/4Y1T1o8m06/K+ABk+ENZjrkN bqOU8KS1UnAmPePx2FebtUKQXVu3Mwia250czMbA8l7rpyOIKsgTEOZZYFaIfRGp DGy+wXZfgfQwbdWkGq6p0c3C+lGnnxYqOIPllbvRl0adx3LTcKGAeP4NWJ+lsUWK NA5+DD3Qr9jPrJiXbmCo75T2ZtW+A9Ra2T47w3wHhXLiwnrhOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPddhqS69e59CHz5QrgHl6Tsk1J4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvZjBjNzg1NTUtOTU5Zi0z NDA2LWE2N2YtYzFiOGI3NWY2M2MwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJ3QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKPOMPB1Krn6YlUJa2H3gXTXAicqCQZndTIrOYOORgkegxQ8O5//bY87 EQV3W2lddQXSV8Qs1hP/scTH3vn37SkPvWdHnwXaXnwzyJtYPUo899i7Zp60cVv2 Dm9Rt9EU+ocIOX6SvKNA+XhKZ4yN6tjjZLQJvLLSSP4tyjU9rqItpR9AbpzmqiFh 6OuVbKGFPHZ7JwOGhmOPZUYM7vwfUKzN/jcZRCMOv6a2vfQmYVpUJ9PmgRXwxNsR yvcgsFdOkNyW1ozkbXAMSpbrq1aOG9PBYJ5bpx1QGXmV2u7k+SzTzWGqE7jNZAQC G2L//3RZdEppDi9qKWWyl6KddWR1VUQ= -----END CERTIFICATE-----Generated at Tue Jul 21 21:06:50 2026 by rpki-client